A lemma (entry) may depend on lemmas (entries) below its position, but never on lemmas above its position. This means the list is a topological order of the dependency graph. An entry 'all subs proved' means that all used lemmas are (transitively) proved.
| Name: | Status: | Subs proved? | Used: |
|---|---|---|---|
| Security | proved | all subs proved | lemma1, wf-purge, inv-run-gen, test, |
| lemma1 | proved | all subs proved | lemma1-gen, |
| lemma1-gen | proved | all subs proved | purge-rec, run-rec, wf-rec, purge-base, run-base, |
| inv-run-gen | proved | all subs proved | run-rec, wf-rec, run-base, |
| wf-purge | proved | all subs proved | purge-rec, wf-rec, purge-base, |
| wf-rec | proved | all subs proved | wf-def, |
| wf-def | axiom | ||
| purge-base | axiom | ||
| purge-rec | axiom | ||
| run-base | axiom | ||
| run-rec | axiom | ||
| test | axiom |